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ABSTRACT 



In the evaluation of the randomness of an S-box, measures 
of resistance to higher order cryptanalysis, interpolation 
ciyptanalysis, partitioning cryptanalysis and differential- 
linear cryptanalysis and necessary conditions for those mea- 
sures to have resistance to each cryptanalysis are set, then 
for functioas as candidates for the S-box, it is evaluated 
whether one or all of the conditions are satisfied, and those 
of the candidate ftmctions for which one or all of the 
conditions are satisfied are selected as required. It is also 
possible to further evaluate the resistance of such selected 
fimctions to at least one of differential cryptanalysis and 
linear cryptanalysis and select those of the candidate fimc- 
tions which are resistant to at least one of the cryptanalyses 
as required. 
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